Sub-processor List
Effective Date: March 1, 2026 Last Updated: July 31, 2026 Document Version: 1.1
Overview
Wallboard Display-US LLC ("Wallboard") engages the following sub-processors to assist in providing the Wallboard digital signage platform. Each sub-processor is bound by data protection obligations no less protective than those in our customer agreements.
Wallboard will notify customers of material changes to this list. Customers may subscribe to notifications by contacting [email protected].
Current Sub-processors
| Sub-processor | Purpose | Data Processed | Data Location |
|---|---|---|---|
| DigitalOcean, Inc. | Cloud infrastructure hosting, managed databases, object storage, backups | Customer Data, Account Data, Content | US and EU (primary hosted data remains in the selected region) |
| Cloudflare, Inc. | DNS, CDN, and web application firewall | IP addresses, request metadata | Global (edge network) |
| Twilio Inc. (SendGrid) | Transactional email delivery | Email addresses, email content | US |
| Chargebee, Inc. | Billing and subscription management | Billing details, subscription data | US |
| Google LLC (Google Analytics) | Website and application analytics (optional, not enabled by default) | IP addresses, usage patterns, device type | US |
| X.AI LLC (xAI) | Optional AI inference, agent execution, web or X search, image analysis, and image generation when Wallboard-managed credentials are used | Customer-selected prompts, source content, images, generated results, and request metadata | United States and other locations described in applicable provider terms |
| Google LLC (Gemini API) | Optional Google Search, Google Maps grounding, and URL-context processing when Wallboard-managed credentials are used | Customer-selected prompts, source content, target URLs, generated results, and request metadata | Global, under Google service terms |
Notes
- DigitalOcean is the primary infrastructure provider. Core Customer Data for EU-based deployments is hosted on EU-based infrastructure. Customer-selected data sent through an optional integration or AI feature is processed by the applicable provider as described in this list.
- Cloudflare currently provides DNS services. CDN and WAF capabilities are being introduced.
- Google Analytics is optional and configurable per deployment. It is not enabled by default.
- AI Datasource and Web Scraper are optional. Customers control whether to enable these features and what prompts, sources, URLs, and content to submit.
- Customer-supplied AI credentials use the customer's provider account. The customer controls the provider terms, billing status, retention options, and account configuration for those credentials.
- xAI API states in its API Security documentation that API inputs and outputs are not used for model training without explicit permission. API content is retained for up to 30 days by default unless Zero Data Retention is enabled for the applicable provider account. Wallboard application requests use stateless response handling, but provider-level Zero Data Retention is a separate account control.
- Gemini API states in its Gemini API Terms that Paid Services do not use prompts or responses to improve Google products. Limited abuse-monitoring retention applies, and Google Search or Google Maps grounding stores prompts, context, and generated output for 30 days under the applicable terms.
- Monitoring and observability (Grafana, Prometheus) are operated on Wallboard's own infrastructure and are not sub-processors.
Changes
| Date | Change |
|---|---|
| March 26, 2026 | Initial sub-processor list published |
| July 31, 2026 | Added optional xAI and Google Gemini processing; clarified customer-managed AI credential paths and provider retention boundaries |
Contact
For questions about our sub-processors, contact [email protected].